Skip to content
OpenAdvisories
High · 7.5 CVE-2024-42481 EUVD-2024-39640

Complete crash of host system due to calculateDirectorySize in skyportd

Published Aug 12, 2024 · Updated Aug 13, 2024 · Assigned by GitHub_M

Description

Skyport Daemon (skyportd) is the daemon for the Skyport Panel. By making thousands of folders & files (easy due to skyport's lack of rate limiting on createFolder. createFile), skyportd in a lot of cases will cause 100% CPU usage and an OOM, probably crashing the system. This is fixed in 0.2.2.

Affected products

VendorProductAffectedFixed
skyportlabs skyportd < 0.2.2 —

References